Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/qwe1odnRDl93GthjEF2yiicIGoI.roa
File: qwe1odnRDl93GthjEF2yiicIGoI.roa (raw, json)
Hash identifier: m9cTrbXqDuzOjKNzUtX9Y4fcg9g3X9Fq3WkkYnz+t3w=
Subject key identifier: AB:07:B5:A1:D9:D1:0E:5F:77:1A:D8:63:10:5D:B2:8A:27:08:1A:82
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0187BA2CF729F794F08250305001429D1588
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/qwe1odnRDl93GthjEF2yiicIGoI.roa
Signing time: Tue 25 Apr 2023 20:48:41 +0000
ROA not before: Tue 25 Apr 2023 20:48:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 84.32.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Aug 2023 18:15:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ba:2c:f7:29:f7:94:f0:82:50:30:50:01:42:9d:15:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 25 20:48:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab07b5a1d9d10e5f771ad863105db28a27081a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:05:22:c5:58:0d:18:71:ad:45:b9:8e:e9:
c1:6b:b9:f4:9f:df:ea:f9:27:6e:01:6c:5d:09:db:
13:d7:03:b6:f5:57:6d:83:3f:7b:e8:68:7f:8c:f6:
d1:3f:7e:c9:57:34:e3:54:d1:02:c2:f1:46:6a:b7:
27:78:22:cf:18:7d:45:10:de:2a:b8:e4:2e:f0:bf:
a2:b1:4b:a9:7b:39:af:00:c1:ca:b7:e2:fa:c7:1a:
56:80:4b:9b:bc:82:92:1c:8e:38:2e:ca:1b:30:42:
05:06:b0:de:f2:d4:f6:3e:b1:58:d1:d0:74:6c:80:
38:ff:f6:da:d8:72:4c:cf:0e:7d:cd:9d:4e:49:f9:
a2:27:65:c3:b1:99:ad:25:ca:1e:28:f0:c7:62:11:
42:e2:f5:7a:77:63:c6:2d:db:d5:ac:ac:af:da:e8:
38:de:5a:72:9a:fa:f6:3d:97:b4:a5:08:82:df:53:
d7:69:66:f6:ef:18:3e:27:7f:b8:47:56:41:25:e3:
3a:eb:12:5a:0d:3d:79:d5:9e:6b:2a:1d:1a:e3:e2:
d5:4d:b1:10:da:57:77:a6:21:13:9f:e9:b1:25:b5:
1b:32:78:eb:a8:72:c7:71:1a:4d:92:7b:98:7b:15:
ca:48:60:cf:d0:32:d4:e6:ab:fb:b5:b0:9b:3e:45:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:07:B5:A1:D9:D1:0E:5F:77:1A:D8:63:10:5D:B2:8A:27:08:1A:82
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/qwe1odnRDl93GthjEF2yiicIGoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0/24
Signature Algorithm: sha256WithRSAEncryption
84:35:73:2e:1f:d8:9e:4d:09:1c:5d:14:3c:5f:f9:59:fb:6d:
19:c9:fb:87:17:a2:ce:17:77:c4:95:8a:56:71:5e:08:3a:9b:
52:1a:2f:79:ef:cc:2b:f4:a1:eb:09:6c:bc:72:54:0e:d4:6c:
36:9d:49:06:0d:41:d5:3b:39:41:b9:c3:fa:95:08:07:0b:83:
20:05:3f:54:c4:ce:c5:fd:cd:c3:98:e7:8b:05:b8:03:df:e1:
f9:8c:47:89:ed:00:91:9b:a7:65:dc:70:de:93:f4:e2:44:1a:
b8:22:6d:72:18:38:04:f7:d4:9c:26:cb:a2:6f:37:34:df:a4:
fd:bf:98:e2:3e:85:b3:bb:9a:31:90:a5:3e:0a:91:6e:d0:5a:
94:af:05:c8:b4:ca:f6:ba:95:89:21:c2:21:b9:4b:cd:e1:8b:
4b:59:85:d7:3c:2e:15:21:76:5c:85:e3:88:b8:16:a0:be:ef:
2a:9d:4d:a4:ac:1b:d8:eb:e6:62:63:1a:05:d0:cd:07:84:a9:
51:9e:61:54:39:dc:f7:0c:73:24:23:5e:a4:19:0f:19:e1:d0:
74:23:a5:eb:75:d2:16:71:d5:2a:f2:0b:94:4c:b2:34:0b:1f:
f5:32:b6:64:26:21:b7:2e:42:2f:ac:0f:28:a8:7e:6b:2d:07:
47:5e:f8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:35 2024 by rpki-client on console-fra.rpki-client.org